SECAI Core · phase 12 of 15
Data loss/leak prevention
A software solution that detects and prevents sensitive information from being stored on unauthorized systems or transmitted over unauthorized networks. Also known as 'DLP.'
The Explain card
- Plain English
- DLP is software that watches where sensitive information is going and blocks it from being stored on unauthorised systems or sent over unauthorised channels.
- Example
- An employee pastes a confidential merger document into a public AI chatbot. The DLP agent recognises the classification label and blocks the upload, logging the attempt for the security team.
- Why it matters
- AI assistants are a new, very convenient exit for company data. DLP extends existing controls to prompts, file uploads and model outputs so that convenience does not become disclosure.
- Hook
- The bouncer at the exit, checking pockets on the way out.
Where it sits in the deck
Phase 12: Defensive Technologies and Secure Development Practices
Map defences directly to the attacks just catalogued — the technical controls, secure coding practices, and protective tools that harden AI and traditional systems alike.
